BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported. There is no available information about whether any later version is affected.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-01-15T00:00:00

Updated: 2024-08-02T10:35:33.399Z

Reserved: 2023-01-15T00:00:00

Link: CVE-2023-23595

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-15T07:15:08.017

Modified: 2024-11-21T07:46:30.073

Link: CVE-2023-23595

cve-icon Redhat

No data.